AES Decrypt
Authenticate and decrypt a LocalKit AES-256-GCM JSON envelope with its password.
Useful tools in your browser.
Authenticate and decrypt a LocalKit AES-256-GCM JSON envelope with its password.
Encrypt UTF-8 text with AES-256-GCM and a password-derived PBKDF2-SHA-256 key. Every run uses a fresh salt and nonce.
Calculate a checksum of UTF-8 text or local files, choose the algorithm and verify an expected hexadecimal value.
Generate a P-256, P-384 or P-521 signing key pair using Web Crypto and export public and private JWKs.
Calculate SHA-256, SHA-384, SHA-512, SHA-1 or CRC32 checksums for local files and compare an expected checksum.
Compute an HMAC using SHA-256, SHA-384 or SHA-512 and a UTF-8 secret key.
Calculate an HMAC-SHA-256 message authentication code with a UTF-8 secret key using Web Crypto.
Decode a JSON Web Token header and payload locally without treating its claims as verified.
Inspect exp, nbf and iat claims against the current device time. Decoding does not verify the signature.
Sign a JSON claims object as an HS256 JWT with a UTF-8 shared secret of at least 32 bytes.
Verify an HS256 JWT signature with your shared secret and inspect expiration and not-before claims.
Generate random URL-safe identifiers using a 64-symbol alphabet and cryptographic randomness.
Choose words independently with uniform cryptographic randomness from your deduplicated word list. Entropy is calculated from list size and word count.
Calculate the theoretical entropy of a uniformly random password from its length and alphabet size. This is not a strength estimate for a human-chosen password.
Generate random passwords on your device.
Derive key bytes from a password, explicit salt and PBKDF2-SHA-256 parameters using Web Crypto.
Generate identifiers from a custom alphabet using unbiased cryptographic random selection.
Generate an RSA-OAEP SHA-256 key pair with exponent 65537 and export public and private JWKs.
Generate cryptographically random bytes and export exact hexadecimal and base64 representations.
Calculate a SHA-1 text checksum with Web Crypto. SHA-1 is a legacy hash and is unsuitable for collision-resistant security.
Calculate the SHA-256 digest of UTF-8 text.
Calculate the SHA-384 hash of the exact UTF-8 input text.
Calculate the SHA-512 hash of the exact UTF-8 input text.
Generate ULIDs with a 48-bit Unix millisecond timestamp and 80 cryptographically random bits. Ordering within the same millisecond is random.